![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v-8GROGd4mY3m-hw7Brm8DhDtvo.roa
File: v-8GROGd4mY3m-hw7Brm8DhDtvo.roa (raw, json)
Hash identifier: pJeumU86tYD2V1+yeiNVD/ZCccdmYjm0xxrgZMuuqHQ=
Subject key identifier: BF:EF:06:44:E1:9D:E2:66:37:9B:E8:70:EC:1A:E6:F0:38:43:B6:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E5B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v-8GROGd4mY3m-hw7Brm8DhDtvo.roa
Signing time: Tue 29 Sep 2020 09:55:38 +0000
ROA not before: Tue 29 Sep 2020 09:55:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3675 (0xe5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BFEF0644E19DE266379BE870EC1AE6F03843B6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:6c:d7:d1:e7:bc:12:4c:9b:bf:6d:e3:57:
02:65:42:56:bf:27:49:6a:0c:3b:63:13:e7:3d:80:
8d:33:7a:5c:dd:c4:71:1c:1b:c4:c6:37:50:82:12:
9e:02:d9:1a:50:0d:a3:a1:c9:4e:39:55:8f:c1:fa:
1c:cf:9b:a1:cd:c4:9c:50:52:6b:a8:38:d6:38:59:
84:9b:f5:80:4a:cb:36:91:ac:2b:77:9e:99:18:39:
4d:64:f5:9b:29:90:92:c7:ef:78:4d:0c:dc:55:80:
51:12:1e:b8:72:79:a9:de:2f:01:f0:a8:02:73:ea:
fb:7e:8f:46:d3:10:7c:18:61:e4:84:77:21:a1:32:
52:7e:4d:30:f8:ed:a4:57:3b:94:c4:08:1d:73:35:
5d:1b:d6:67:9b:9c:40:5a:a2:a7:81:b9:88:fe:0d:
2c:88:c5:d8:45:59:07:1e:da:7a:b0:2c:6e:a2:63:
d9:ff:d8:49:8c:bd:74:51:16:d1:27:44:38:16:45:
35:bd:cf:8e:c5:a0:c7:9c:8f:c0:43:54:d2:da:8f:
af:c8:38:26:06:06:ca:73:ab:d0:22:66:30:0f:d7:
f0:f2:6e:4a:58:ef:ce:5d:e3:18:19:b2:db:0f:74:
fc:25:e6:a5:41:ab:4b:cc:cf:bb:47:49:c6:24:e2:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:06:44:E1:9D:E2:66:37:9B:E8:70:EC:1A:E6:F0:38:43:B6:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v-8GROGd4mY3m-hw7Brm8DhDtvo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:1c:ab:9a:cf:27:d0:06:21:6a:e1:05:31:06:fa:3e:09:4d:
f5:c1:e5:3b:a7:9a:c1:08:26:a3:7f:1a:1c:60:59:6a:94:4f:
47:49:5e:c4:3b:1f:01:f8:a3:8c:cb:26:c3:ad:50:47:28:c7:
7e:6d:23:6f:13:0a:85:72:fc:55:4f:b3:f4:24:60:ef:52:0d:
82:b0:2e:98:a6:09:c5:c9:d9:a0:d4:6d:4e:cb:1f:5e:91:ca:
93:67:98:d1:aa:ae:57:a4:c8:ce:36:46:e3:20:0b:cb:75:1a:
e6:3d:8b:51:cd:10:14:34:a1:7c:96:21:e8:ed:6d:45:6a:6c:
53:d1:a6:e7:bb:f3:0f:22:5d:0e:1b:e1:93:23:29:5e:42:48:
13:95:01:5f:58:3c:7b:c3:a9:6a:3a:16:66:a0:4e:da:c1:ae:
a3:96:bc:ea:e5:db:62:1f:b3:c3:30:ce:26:83:a2:cc:28:ff:
29:d1:16:10:76:b1:cb:9c:68:70:da:2c:33:6a:3a:3f:dd:ed:
66:7f:ae:c8:d8:a8:b1:8d:e2:17:ad:a9:8a:3b:44:19:f4:aa:
26:22:86:60:5d:9f:a6:c5:ff:f6:a5:ae:17:c8:6c:c4:ac:26:
c2:d0:3f:36:a5:f1:8d:e1:63:be:9c:ea:ec:69:da:f6:e4:18:
21:62:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:34 2025 by rpki-client